Epilog 1.3

Without epilog, you could be missing out on valuable evidence. Many devices (whether mobile phones, computers, sat navs or other devices) store data in the SQLite database format. Data stored in this type of database can provide a huge evidential opportunity for investigators. Many "off-the-shelf" tools can be used to view the live records in the database, but epilog from CCL extracts deleted and de-referenced data from the database files or across a disc image or hex dump.epilog's three recovery algorithms can be used on any SQLite database, regardless of the type of data stored. However, epilog signatures can be used to tailor its behaviour towards a particular database. Built in to the initial release of epilog are signatures including: